mirror of
https://github.com/hrydgard/ppsspp.git
synced 2026-10-31 19:47:06 +01:00
The multi-name path counted names straight into saveDataListCount, so returning on a path traversal name left a count behind with the list already freed by Clear(). The next savestate then serialized that many entries from a null list and crashed in Do(std::string). Count on the side, and don't write entries for a list that isn't there. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>